Detections
Analytics
AIX7-00-003063 - The ndpd-router must be disabled on AIX.
Information
This manages the Neighbor Discovery Protocol (NDP) for non-kernel activities, required in IPv6.The ndpd-router manages NDP for non-kernel activities. Unless the server utilizes IPv6, this is not required and should be disabled to prevent attacks.
Solution
In "/etc/rc.tcpip", comment out the "ndpd-router" entry by running command:# chrctcp -d ndpd-router
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-215368r958478_rule, STIG-ID|AIX7-00-003063, STIG-Legacy|SV-101463, STIG-Legacy|V-91365, Vuln-ID|V-215368
Plugin: Unix
Control ID: fe2c691dac91aa5e6202c82ad86597276b7bfc38969af8f9d2d19e6b1d89f79d